[Samba] ldapsearch against Samba4 AD questions

[Andrew Bartlett]

On Thu, 2015-10-15 at 16:22 +0200, mathias dufresne wrote:
> ERRATUM:
> It seems GSSAPI and TLS are *NOT* meant to be used together:

Correct, you can't encrypt with both layers at once.  GSSAPI encryption
is better anyway, as you probably don't have a real CA on the server's
TLS X.509 certificate.

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba